CVE-2007-0071

CriticalCVSS 9.3/10Last modified Jun 16, 2026

Description

Integer overflow in Adobe Flash Player 9.0.115.0 and earlier, and 8.0.39.0 and earlier, allows remote attackers to execute arbitrary code via a crafted SWF file with a negative Scene Count value, which passes a signed comparison, is used as an offset of a NULL pointer, and triggers a buffer overflow.

Metrics

CVSS 2.0 9.3/10AV:N/AC:M/Au:N/C:C/I:C/A:C

Weakness enumeration

CWE-189

Affected software

No affected versions have been published.

Timeline

Published
Apr 9, 2008
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 2007

CVE-2007-007210.0Heap-based buffer overflow in an unspecified procedure in Trend Micro ServerProtect 5.7 and 5.58 allows remote attackers to execute arbitrarCVE-2007-007310.0Heap-based buffer overflow in an unspecified procedure in Trend Micro ServerProtect 5.7 and 5.58 allows remote attackers to execute arbitrarCVE-2007-007410.0Heap-based buffer overflow in an unspecified procedure in Trend Micro ServerProtect 5.7 and 5.58 allows remote attackers to execute arbitrarCVE-2007-00757.5AspBB stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a databaseCVE-2007-00767.5Openforum stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a dataCVE-2007-00775.0lblog stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a databaseCVE-2007-00785.0BattleBlog stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a datCVE-2007-00797.8rblog stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a databaseCVE-2007-00806.6Buffer overflow in the SMB_Connect_Server function in FreeRadius 1.1.3 and earlier allows attackers to execute arbitrary code related to theCVE-2007-00816.8Sunbelt Kerio Personal Firewall (SKPF) 4.3.268 and 4.3.246, and possibly other versions allows local users to provide a Trojan horse iphlpapCVE-2007-00826.5users_adm/start1.php in IMGallery 2.5 and earlier does not properly handle files with multiple extensions, which allows remote authenticatedCVE-2007-00836.8Cross-site scripting (XSS) vulnerability in Nuked Klan 1.7 and earlier allows remote attackers to inject arbitrary web script or HTML via a
CVE-2007-0071: Critical severity, CVSS 9.3 | Vulnix